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Claims 

1. Apparatus for decrypting of an encrypted electronic document by means of a key 
data file that is introduced or delivered from a server over a public data transmis- 
sion network, preferably the Internet, 

whereby the decrypted electronic document is dispiayable on a local data process- 
ing appliances, which comprise a visualization unit or representation unit that en- 
ables an outputting of the unencrypted electronic document 
and which comprise a decryption unit that is used for combining or joining the en- 
crypted document and the key data file for generating the decrypted document, 
characterized in that 

the decryption unit comprise in the state, which is capable for accomplishment, at 
least one function unit that is technically changeable by means of a program, which 
is capable to be configured by selecting of a key data file from a plurality of local or 
server sided available key data files or is capable to be configured by the perform- 
ing of a necessary operation procedure of the decryption unit used for the combi- 
nation or integration in the generating of the decrypted document or used for the 
configuration of a specific accessing on a server sided address that is comprised 
by a key data file 

and a decryption operation of the decryption unit is influenced in a manner, that 
only with a predetermined configuration of the function unit the combining or inte- 
grating in the decryption unit lead to the correct decrypted document, 
and whereby the predetermined configuration the function unit is installed or estab- 
lished with at least a single online-contact of the local data processing appliance 
with the server and which comprise a parameter setting of the function unit resp. 
decryption unit or an assignment of a program files resp. command components to 
the decryption unit or comprise a generating of the functions- or decryption unit. 

2. Apparatus as set forth in claim 1, characterized in that the visualization or repre- 
sentation unit is realized as browser and the decryption unit is used by a plug-in in 
the browser, or the decryption unit is integrated in the browser, or the decryption 
unit is arranged as an approachable local server unit on the local data processing 
appliance, or a function unit on the local data processing unit is connected for in- 
stance called over a Intranet-connection belongs to the decryption appliance of the 
remote data processing unit. 
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3. Apparatus as set forth in claim 1, characterized in that the function unit is realized 
as a program library of the decryption unit or a visualization or representation unit, 
as executable file or as command line or element of the decryption unit on an op- 
eration system platform of the local data processing appliances that is preferably 
managed or realized by a programming- or script language and in particular by 
means of a digital signature, that is formed on the function unit and that is capable 
to recognize that an execution operation of the decryption unit, is correct, not ma- 
nipulated or properly known and thereby capable to be evaluated in a result influ- 
enced manner. 

4. Apparatus as set forth in claim 1 , characterized in that the encrypted electronic 
document is realized by means of a encryption procedure, in which the encrypted 
document and the key data file are generated from the decrypted document that 
correspond to original amount of data, which comprise a sequence of information 
component of a meta language in form of a written language, a number system or 
information components from a predetermined uniform format structure of ar- 
ranged or ordered data elements, in particular image-, sound- or program informa- 
tion, that data elements are stored in a plurality of electronic addressable storage 
areas and that the encrypted document is generated by following operations: 

Exchanging or removing of an information component in the amount of data 
or attaching of an information component at a predetermined position in 
the sequence of information components or replacing of an information 
components against a preferred information component that is not con- 
tained in the original amount of data not contained, 
whereby the key data file comprise specific information about the ex- 
changed, removed, inserted, attached or interchanged information compo- 
nent and is thereby arranged in manner that a reconstruction of the original 
amount of data is permitted. 

5. Apparatus as set forth in claim 4, characterized in that the decryption unit is real- 
ized as a reconstruction unit, so that the processing of the encrypted amount of 
data and the key data file is arranged for generating of the decrypted document. 



6. Apparatus as set forth in claim 4, characterized in that each encrypted document is 
assigned to a plurality of usable key data files by the decryption unit, whereby at 
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least one is usable to generate the decrypted electronic document, and at least 
one is usable to generate a document that is for a user seemingly correct, however 
which is not arranged or designed as the correct decrypted document that is corre- 
sponding to the electronic document. 

7. Apparatus as set forth in claim 1, characterized in that for generating of the de- 
crypted document a plurality of key data file is necessary. 

8. Apparatus as set forth in claim 1, characterized in that the necessary operation 
procedure that is used for the combination or integration for the generation or crea- 
tion of the decrypted document comprise the selecting of a key data file from a plu- 
rality of key data files or comprise the producing of a sequence of successive de- 
cryption steps or comprise the needed key data files used for the combination or 
integration. 

9. Apparatus as set forth in claim 1, characterized in that the predetermined configu- 
ration is designed in a document specific manner, in particular after expiring of a 
predetermined period of usage time a decrypted electronic document requires a 
renewed decryption after renewed configuration. 

10. Apparatus as set forth in claim 1, characterized in that the predetermined configu- 
ration is dependent from the local data processing appliance and in particular spe- 
cifically designed or arranged for the appliance. 

11. Apparatus as set forth in claim 1, characterized in that the decryption unit is de- 
signed or arranged in an manner that a repeated or new decryption of the en- 
crypted document occurs by means of a configuration of the function unit, which 
differ from the configuration of a foregoing decryption process and in particular is 
influenced by operation or status data of the foregoing decryption process. 

12. Apparatus as set forth in claim 1, characterized in that the decryption unit is as- 
signed to a plurality of function units, whereby the decryption unit comprise the 
configuration, the selecting of one of the function units and its assigning to a de- 
cryption operation. 
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13. Apparatus as set forth in claim 12, characterized in that the corresponding function 
unit from the plurality of function units is different with regard to its effect on the 
decryption operation of the encryption unit and which are preferably realized as bi- 
nary files resp. modules. 

14. Apparatus as set forth in claim 1, characterized in that the key data file is realized 
as an executable program, which is acting as a function unit of the decryption unit, 
whereby in particular information for generation of the decrypted document arises 
from interactions between components, internal variables or other program pa- 
rameters of the executable program and are acting on the encrypted document. 

15. Apparatus as set forth in claim 1, characterized in that the electronic document is 
selected from the group, which consist of audio-, music-, video-, program-, multi- 
media-, animations-, 3D-, text-, image- or game files. 

1 6. Apparatus as set forth in claim 1 , characterized in that server sided of a server unit 
comprise a proxy unit that is installed in front of the server unit, which is approach- 
able or callable by function of the function unit and which execute an identification 
or authentification process of the called local data processing appliance, in particu- 
lar for comparing document related usage right of the user on the local data proc- 
essing appliance with the server sided introducibie or deliverable key data files. 

1 7. Method for decrypting of an encrypted electronic document by means of a key data 
file that is introduced or delivered from a server over a public data transmission 
network, preferably the Internet, in particular method for operating the apparatus 
as set forth in claim 1, 

whereby the decrypted electronic document is displayable on a local data process- 
ing appliances, which comprise a visualization unit or representation unit that en- 
ables an outputting of the unencrypted electronic document 
and which comprise a decryption unit that is used for combining or joining the en- 
crypted document and the key data file for the generating of the decrypted docu- 
ment, with the steps: 

transmitting of the key data file partly or completely over the data transmis- 
sion network, 
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transmitting of at least one predetermined function unit of the decryption unit 
as file, command components or script over the data transmission network to 
the local data processing appliance, 
activating of the decryption unit, 

decrypting of the encrypted document by electronic processing of a data 
stream that is corresponding to the key data file or to the encrypted docu- 
ment by means of the predetermined function unit and 
displaying of the decrypted document by means of the visualization or 
representation unit. 
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